In this week's cybersecurity and health tech briefing, we delve into emerging digital threats and technological advancements. Hackers are now exploiting OAuth 2.0 workflows to infiltrate Microsoft 365 accounts, bypassing multifactor authentication by tricking users into authorizing malicious applications. On the Android front, a newly uncovered malware uses NFC to access financial apps and conduct unauthorized transactions. Meanwhile, leading AI models are found vulnerable to a novel adversarial technique called "policy puppetry" prompt injections, raising concerns about AI reliability and safety. In healthcare, Frederick Health Medical Group experienced a ransomware attack affecting nearly a million patients, while the University of New Mexico Hospital cut 53 executive positions in a cost-saving effort. On a more promising note, researchers at Mount Sinai have refined an FDA-approved AI tool to better predict risks for hypertrophic cardiomyopathy using ECG data. Finally, new cybersecurity threats include the "SessionShark" phishing toolkit, designed to bypass Office 365 MFA, and a massive breach by the hacking group R00TK1T, which compromised over 900,000 TikTok user credentials. Stay informed and protected as digital threats continue to evolve. 
https://healsecurity.com/

Today’s Cybersecurity Rundown: Microsoft 365 Exploits, TikTok Breach, & AI Vulnerabilities

The HEAL Security Dispatch Daily Digest, hosted by Richard Simmons from London, delivers a comprehensive overview of the latest cybersecurity developments with a sharp focus on the healthcare sector. Each episode highlights pressing cyber threats, expert research, global breaches, and technological innovations shaping the cybersecurity landscape. This edition features stories ranging from a sophisticated ransomware attack using a counterfeit KeePass application to a major outage at Kettering Health suspected to be the work of the Interlock ransomware gang. It also examines a groundbreaking risk assessment metric proposed by NIST and CISA, significant data breaches affecting organizations like SK Telecom and Nationwide Recovery Services, and the rapid growth of the global healthcare cybersecurity market. With insights into emerging malware trends and the role of AI, blockchain, and machine learning in boosting cyber resilience, the podcast serves as a vital tool for professionals navigating the complex intersection of healthcare and information security. 
https://healsecurity.com/

Cybersecurity Highlights: VMware Ransomware via Fake KeePass, and Kettering Health Attack

The HEAL Security Dispatch Daily Digest is your essential daily briefing on the latest developments at the intersection of cybersecurity and healthcare. Hosted by Richard Simmons from London, the podcast unpacks emerging threats, groundbreaking research, and industry responses from around the globe. In this episode, it highlights the growing cybersecurity implications of AI integration in healthcare systems, showcases evolving ransomware tactics by groups like 3am, and covers strategic partnerships such as TIER IV and PlaxidityX’s work on autonomous vehicle security. Listeners are also alerted to destructive malware lurking in the NPM repository, critical vulnerabilities in .NET applications using CefSharp, and Microsoft's international crackdown on the Lumma Stealer malware. The episode wraps with an update on a major cyberattack on Kettering Health in Ohio, affecting multiple hospitals and facilities. With a focus on expert insight and actionable intelligence, the podcast is a must-listen for professionals navigating today's complex digital threat landscape. 
https://healsecurity.com/

AI Security Risks, and TIER IV Partners with PlaxidityX on Autonomous Bus Cybersecurity

The HEAL Security Dispatch Daily Digest is a cybersecurity podcast hosted by Richard Simmons from London, delivering daily updates on the latest threats, trends, and expert insights—especially at the intersection of healthcare and cyber defense. In the May 27, 2025 episode, the podcast uncovers a wave of alarming cyber incidents: from fake Ledger apps targeting Mac users' cryptocurrency wallets, to the emergence of the sophisticated AppleProcessHub malware. It also reports on major corporate breaches, including incidents affecting Adidas, MathWorks, and Kettering Health, exploring the repercussions and response strategies. The episode highlights the growing vulnerability of connected medical devices within healthcare systems and examines new forms of malware hitting Docker environments and phishing campaigns impersonating OneNote to capture sensitive credentials. Through clear analysis and timely information, HEAL Security Dispatch equips listeners with the knowledge to navigate today’s digital threats. 
https://healsecurity.com/

Cybersecurity Roundup: Adidas and MathWorks Breaches, and Emerging Healthcare Threats

In this episode of the cybersecurity-focused podcast, listeners are brought up to speed on several critical developments impacting global digital infrastructure and safety. The discussion begins with a potential Windows 11 startup issue caused by the optional update KB5058405, with Microsoft actively investigating and offering temporary workarounds. It then turns to the U.S. Treasury’s sanctions on Funnull Technology Inc., involved in romance scams totaling over $200 million in fraud. The episode also covers a recent cyberattack on Covenant Health that disrupted hospital operations, underlining the vulnerability of healthcare networks. In a startling revelation, Chinese hacker group APT41 has been misusing Google Calendar to deploy a new malware variant, prompting cleanup efforts by Google and Mandiant. Listeners are also informed about the shutdown of AVCheck—a malware-obfuscation service—through the multinational Operation Endgame. Cisco Talos reports on a rising trend of ransomware disguised as AI tool installers, and the episode concludes with news of a data breach at Serviceaide affecting nearly half a million Catholic Health patients. Each segment underscores the growing scale and sophistication of cyber threats in today’s digital age. 
https://healsecurity.com/

Cybercrime Surge: Microsoft’s Update Glitch, and Major Healthcare Breaches Expose Security Gaps

In today’s episode of the Cybersecurity Roundup for Friday, June 13, 2025, we explore a turbulent week in the tech world marked by major disruptions and critical vulnerabilities. Cloud service outages hit industry giants including Cloudflare, Google, and Microsoft, revealing the fragility of even the most robust digital infrastructures and highlighting the need for stronger service-level contingency planning. We examine a zero-click exploit in Apple iMessage used to infect journalists’ devices with Paragon spyware, a stark reminder of escalating privacy threats. The episode also covers the Fog ransomware group’s novel tactics, the misuse of expired Discord invites for malware distribution, and a widespread JavaScript injection campaign dubbed JSFireTruck that infected over 269,000 websites. Additional threats include malware posing as trusted software, a smartwatch-based data exfiltration technique named SmartAttack, and critical vulnerabilities in Mitel and Trend Micro products. For professionals and individuals alike, these stories emphasize the evolving sophistication of cyber threats and the urgent need for proactive security measures. 
https://healsecurity.com/

Cloudflare, Google, Microsoft Hit by Outages; and Trend Micro Vulnerabilities Raise Security Alarms

In today’s episode of the HEAL Security Dispatch, we spotlight a wave of cyber incidents hitting critical sectors worldwide. Hackers exploit Microsoft Exchange vulnerabilities to plant keyloggers on Outlook login pages, while Chinese state-linked actors breach a Canadian telecom provider using a Cisco router flaw. A new FileFix variant tricks Windows users into executing PowerShell via File Explorer, and researchers unveil novel methods to shut down cryptominer botnets. Marks & Spencer faces ransomware fallout with ripple effects across retail, and spyware dubbed SparkKitty infiltrates both Apple and Google app stores to steal sensitive images. Finally, Aflac investigates a data breach following a social engineering attack, raising fresh concerns for the insurance industry.
Stay tuned as we examine the broader implications of these events in our increasingly connected world.
healsecurity.com/

Nation-State Actors, Retail Fallout, and a New Spyware Twist

In today’s episode of the HEAL Security Dispatch, we spotlight a wave of cyber incidents hitting key sectors worldwide. A critical flaw in Citrix NetScaler disrupts authentication for thousands of users, while Qantas investigates a third-party breach that exposed personal data of up to six million customers. A vulnerability in the Forminator WordPress plugin puts over 400,000 websites at risk of takeover, and 23andMe’s new owner pledges to protect genetic data amid regulatory scrutiny. Meanwhile, ransomware continues to plague U.S. government systems, and researcher mr.d0x reveals two evolving attack chains—FileFix and its browser-based variant—that bypass key Windows and browser safeguards.

Stay with us as we break down the latest threats, exploits, and defensive moves shaping the global cybersecurity landscape.
healsecurity.com

Citrix Login Chaos, Qantas Breach, the Evolving FileFix Threat

In today’s episode of the HEAL Security Dispatch, a malicious pull request infects thousands through a compromised Visual Studio Code extension, while a leaked copy of Shellter Elite enables widespread infostealer deployment. A trojanized Android app bypasses Google Play defenses to target North American banks, and a popular Chrome extension turns into spyware overnight. Meanwhile, Ingram Micro faces ransomware disruption, Qantas responds to an extortion attempt after a massive data breach, and over 17,000 fake news sites are uncovered in a global investment scam network.

Stay with us as we unpack these escalating threats and the tools driving modern cybercrime.

Extension Hijacks, Leaked Hacker Tools, Android Trojans, and Global Scam Networks

In today’s deep dive, we unpack a wave of major healthcare data breaches reported to federal authorities, impacting millions. We explore the release of a free decryptor for Phobos ransomware, a significant breakthrough for victims. Hospitals and public services in Kansas, Nova Scotia, and Glasgow are reeling from recent cyber incidents. Plus, we look at critical vulnerabilities affecting VMware and Citrix systems used across the healthcare sector. Stay ahead with the latest threats and defense updates in healthcare cybersecurity.

Hospital Hacks, Ransomware Relief, and Rising Threats in Healthcare Cybersecurity

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #RansomwareAttack